This guide provides instructions on how to integrate BI events data with Google PubSub.

Prerequisites

Ensure that you have a tenant configured for your organization and able to enroll users.

Google PubSub Configuration

• Create a new project

• Create a new Topic and default Subscription

• Create a GCP service account and grant it an IAM role that allows publishing to a Pub/Sub topic of your choice

• Generate a key and download the JSON representation. Share this JSON file with BI SME, Topic name and list of event types interested in. The appendix section explains how to get the event types

Create a new project

Access console.google.com with admin credentials.  Click on Create a project under IAM & Admin menu.

In the “New Project” screen, type in a project name such as “bi-pubsub”. Choose organization and location to suit your GCP configuration. Click Create

Create a new Topic

Enter project in the search box . In the drop-down search results, select the project you created under PROJECTS , FOLDERS & ORGANIZATIONS.

After selecting the project , in the search box type topics. In the drop-down search results, select Topics.

On the Topics screen , click CREATE TOPIC

Enter a name for the Topic ID such as “bi-data-export-pub-sub”. Leave Add a default subscription selected. This will create a subscription automatically. Click CREATE TOPIC.

You will see the topic created with a default subscription. The default subscription created is projects/bi-pubsub/subscriptions/bi-data-export-pubsub-sub

Create GCP service account

The service account is used BI event integration code to authenticate to Google PubSub. In the Google cloud console, select your project and select Service Accounts under “IAM & Admin”.  Click CREATE SERVICE ACCOUNT in menu.

In the Create service account screen, enter a name for the service account, such as bi-data-export-sa. The Service account ID and the email address are automatically filled in. Enter description in Service account description and click CREATE AND CONTINUE

Under “Grant this service account access to project” click on the Role drop-down and select Pub/Sub Publisher. Click Done

Generate a service account key and download the JSON file.

Navigate to the service account you created  in IAM & Admin > Service accounts

Click on the service account. Select Create New Key under Add key drop-down/

In the pop-up screen, select JSON key type. Click CREATE

The JSON file will be saved to your computer. Share this file securely with BI SME

Beyond Identity Configuration

In BI admin console, navigate to Integrations, SIEM. Click on Add SIEM integration,  In ADD SIEM integration pop up, choose Cloud Pub/Sub

In Add SIEM integration screen, provide a name, the topic name from section 3.2. For the service account upload the file from section 3.4. In events drop down window select all events or only the events interested in. Make the status Active. Click on Save changes

Appendix

How to get event types?

• Access https://developer.beyondidentity.com/reference/getevents

• Scroll down the page and under Responses look for 200. Click on the button to the right of description

• This will pop-up the screen as shown below. All event types are listed under event type string required